jmpsec osctrl

• CVE-2026-28280 Medium 6.1 `osctrl-admin` has Stored Cross-Site Scripting (XSS) in On-Demand Query List 0.3%
• CVE-2026-28279 High 7.4 `osctrl-admin` Vulnerable to OS Command Injection via Environment Configuration 1.0%